Lucene search
+L

26 matches found

Kitploit
Kitploit
•added 2026/10/03 5:54 a.m.•23 views

missing-cve-nuclei-templates

nuclei 템플릿 공식 저장소에서 누락된 CVE의 주간 업데이트 목록 참고 이 저장소는 100% 자동화되어 있으므로 오류가 있을 수 있지만, 일반적으로는 상당히 정확합니다. 데이터가 어떻게 수집되는지 이해하려면 "작동 방식" 섹션을 참고하세요. 통계 📊 분석된 CVE : 174067 누락된 CVE : 68723 취약점 유형별 드롭다운 : 유형| 개수| 데이터 ---|---|--- XSS| 23811| xss.txt RCE| 3669| rce.txt SQL Injection| 13683| sqli.txt Local File...

6.2AI score
SaveExploits0References45
Kitploit
Kitploit
•added 2026/10/01 11:20 p.m.•9 views

Gitea-Forgejo-CVE-2025-68937

Уязвимость произвольного расширения шаблонов в Gitea и Forgejo Эта работа лицензирована в соответствии с Creative Commons Attribution-ShareAlike 4.0 International License. Краткое описание Проверяя исходный код Forgejo и Gitea, чтобы лучше понять, как выполняется шаблонизация, я обнаружил...

9.5CVSS8.4AI score0.00501EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/27 12:09 a.m.•14 views

nuclei_template

이 저장소에는 README가 없습니다...

5.8AI score
SaveExploits0
NVD
NVD
•added 2026/09/10 9:17 p.m.•13 views

CVE-2026-89094

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...

9.9CVSS0.0085EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/10 8:42 p.m.•96 views

CVE-2026-89094

Forgejo versions prior to 16.0.4 are vulnerable to remote code execution (RCE) when a user creates a crafted template repository. The root cause is mishandled template expansion on files located in the .forgejo/template directory, which allows an attacker with low privileges to achieve code execu...

9.9CVSS6.2AI score0.0085EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/10 8:42 p.m.•16 views

EUVD-2026-75732

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...

9.9CVSS6AI score0.0085EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/10 8:42 p.m.•9 views

CVE-2026-89094

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...

9.9CVSS6.2AI score0.0085EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•22 views

PT-2026-89589

Name of the Vulnerable Software and Affected Versions Forgejo versions prior to 16.0.4 Description Remote code execution is possible through the use of a crafted template repository. This occurs because the software mishandles template expansion on files located within the .forgejo/template...

9.9CVSS6AI score0.0085EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•3 views

CVE-2026-89094: Improper Neutralization of Special Elements Used in a Template Engine

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...

9.9CVSS6.2AI score0.0085EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/09 12:23 a.m.•11 views

SUSE CVE-2026-25718

Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...

9.1CVSS5.8AI score0.00562EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/02 6:37 p.m.•13 views

GO-2026-6340 Gitea template repository generation follows unsafe filesystem paths in code.gitea.io/gitea

Gitea template repository generation follows unsafe filesystem paths in code.gitea.io/gitea...

9.1CVSS5.8AI score0.00562EPSS
SaveExploits0References8
Snyk
Snyk
•added 2026/07/03 10:19 p.m.•10 views

Symlink Attack

Overview gitea.dev/modules/util is a Git with a cup of tea, painless self-hosted git service. Affected versions of this package are vulnerable to Symlink Attack in the template repository generation process. An attacker can access or modify files outside the intended directory by leveraging...

9.1CVSS5.8AI score0.00562EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/03 10:19 p.m.•10 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the template repository generation process. An attacker can access or modify files outside the intended directory by leveraging symlinked or non-regular paths. Remediation Upgrade...

9.1CVSS5.8AI score0.00562EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/03 10:19 p.m.•10 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the template repository generation process. An attacker can access or modify files outside the intended directory by leveraging symlinked or non-regular paths. Remediation Upgrade gitea.dev/services/repository to versi...

9.1CVSS5.8AI score0.00562EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/03 9:31 p.m.•12 views

Gitea template repository generation follows unsafe filesystem paths

Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...

9.1CVSS5.8AI score0.00562EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
•added 2026/07/03 8:19 p.m.•52 views

CVE-2026-25718 Gitea template repository generation mishandles symlinked paths

Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...

0.00562EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/03 8:19 p.m.•12 views

CVE-2026-25718 Gitea template repository generation mishandles symlinked paths

Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...

5.8AI score0.00562EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/07/03 8:19 p.m.•33 views

EUVD-2026-41624

Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...

5.8AI score0.00562EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/03 8:19 p.m.•13 views

CVE-2026-25718 Gitea template repository generation mishandles symlinked paths

Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...

9.1CVSS5.9AI score
SaveExploits0References6
CVE
CVE
•added 2026/07/03 8:19 p.m.•70 views

CVE-2026-25718

Gitea versions before 1.25.5 are vulnerable to a Symlink Attack due to improper path resolution during template repository generation. This flaw allows an attacker to read or write files outside the intended directory by leveraging symlinked or non-regular paths . Affected components include gite...

9.1CVSS5.8AI score0.00562EPSS
SaveExploits0References4
Rows per page
Query Builder